How can I restrict the rights of individual users?

AEB applications already include predefined roles that an administrator can assign to individual users: Roles in your AEB product.

Administrators also have the option of creating individual roles that restrict rights. These can then be assigned to users.

• Only an administrator of the application (I_CLIENTADMIN) can create self-defined roles.

1. Creating own roles

   Create a new role. Go to the User administration – Roles and click New. Enter a descriptive Abbreviation and Name and, if necessary, a short description.

   In the following example, access to the application's master data is to be restricted:
   

2. Restricting the view of entries in the Office

   If you wish to restrict access of a user to individual or multiple entries from the Office, you can do this by going to User administration – Access rights – Office.
   
   Select the entry in the access rights that to which you wish to restrict access and assign this to the new role. In the following example, all Master data is to be restricted. The arrow lets you expand individual entries and restrict only individual areas such as Companies, Authorizations, or Licenses:
   
   Click Apply to enter the access right for the role. Finally, select that access via the Office is prohibited and Save & close your entries.

3. Assigning the role to a user
   
   In the User administration, open all users of the application via Users. Double-click to open the user to which you want to assign the new role. On the Roles sheet, click Add to add the new role:
   
   Save & close saves your changes for the user.